config/rbac/role.yaml (217 lines of code) (raw):

--- apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: name: manager-role rules: - apiGroups: - "" resources: - configmaps - pods - serviceaccounts - services verbs: - create - delete - get - list - patch - update - watch - apiGroups: - "" resources: - events verbs: - create - patch - apiGroups: - "" resources: - namespaces verbs: - list - patch - watch - apiGroups: - apps resources: - daemonsets - deployments - statefulsets verbs: - create - delete - get - list - patch - update - watch - apiGroups: - apps resources: - replicasets verbs: - get - list - watch - apiGroups: - autoscaling resources: - horizontalpodautoscalers verbs: - create - delete - get - list - patch - update - watch - apiGroups: - cloudwatch.aws.amazon.com resources: - amazoncloudwatchagents verbs: - get - list - patch - update - watch - apiGroups: - cloudwatch.aws.amazon.com resources: - amazoncloudwatchagents/finalizers verbs: - get - patch - update - apiGroups: - cloudwatch.aws.amazon.com resources: - amazoncloudwatchagents/status verbs: - get - patch - update - apiGroups: - cloudwatch.aws.amazon.com resources: - dcgmexporters verbs: - get - list - patch - update - watch - apiGroups: - cloudwatch.aws.amazon.com resources: - dcgmexporters/finalizers verbs: - get - patch - update - apiGroups: - cloudwatch.aws.amazon.com resources: - dcgmexporters/status verbs: - get - patch - update - apiGroups: - cloudwatch.aws.amazon.com resources: - instrumentations verbs: - get - list - patch - update - watch - apiGroups: - cloudwatch.aws.amazon.com resources: - neuronmonitors verbs: - get - list - patch - update - watch - apiGroups: - cloudwatch.aws.amazon.com resources: - neuronmonitors/finalizers verbs: - get - patch - update - apiGroups: - cloudwatch.aws.amazon.com resources: - neuronmonitors/status verbs: - get - patch - update - apiGroups: - coordination.k8s.io resources: - leases verbs: - create - get - list - update - apiGroups: - monitoring.coreos.com resources: - podmonitors - servicemonitors verbs: - create - delete - get - list - patch - update - watch - apiGroups: - networking.k8s.io resources: - ingresses verbs: - create - delete - get - list - patch - update - watch - apiGroups: - policy resources: - poddisruptionbudgets verbs: - create - delete - get - list - patch - update - watch - apiGroups: - route.openshift.io resources: - routes - routes/custom-host verbs: - create - delete - get - list - patch - update - watch